在 Exchange 服务器上运行 Windows 防病毒软件Running Windows antivirus software on Exchange servers

在 Microsoft Exchange 服务器上运行 Windows 防病毒程序时,可以帮助增强 Exchange 组织的安全性和运行状况。When you run Windows antivirus programs on Microsoft Exchange servers, you can help enhance the security and health of your Exchange organization. 但是,如果未正确配置它们,则 Windows 防病毒程序可能导致Exchange Server。However, if they aren't configured correctly, Windows antivirus programs can cause problems in Exchange Server.

任何 Windows 防病毒程序均有两个基本组件:There are two basic components of any Windows antivirus program:

  • 内存常驻扫描实时保护 监视已加载并在计算机的活动内存中运行的所有文件和进程。Memory-resident scanning or real-time protection monitors all files and processes that are loaded and running in a computer's active memory.

  • 文件级扫描 是指手动或按计划检查硬盘上的文件是否具有病毒。某些防病毒程序会在病毒签名更新后自动开始按需扫描,以确保使用最新的签名扫描所有文件。File-level scanning refers to checking files on the hard disk for viruses manually or on a regular schedule. Some antivirus programs start an on-demand scan automatically after the virus signatures are updated to make sure that all files are scanned with the latest signatures.

最大的潜在问题是,Windows 防病毒程序可能会锁定或隔离 Exchange 需要修改的打开的日志文件或数据库文件。The biggest potential problem is a Windows antivirus program might lock or quarantine an open log file or database file that Exchange needs to modify. 这可能会导致事件日志中出现严重Exchange Server,并且还可能会生成 1018 个事件日志错误。This can cause severe failures in Exchange Server, and it might also generate 1018 event log errors. 因此,必须将这些文件排除在外,不让 Windows 防病毒程序对其进行扫描。Therefore, excluding these files from being scanned by the Windows antivirus program is very important.

另一个需要考虑的问题是,Windows 防病毒程序无法替换基于电子邮件的发垃圾邮件和反恶意软件解决方案,因为运行在 Windows 服务器上的 Windows 防病毒程序无法检测到仅通过电子邮件分布的病毒、恶意软件和垃圾邮件。Another issues to consider is that Windows antivirus programs can't replace email-based antispam and antimalware solutions because Windows antivirus programs that run on Windows servers can't detect viruses, malware, and spam that are distributed only through email.

在 Exchange 服务器上部署 Windows 防病毒程序时,请确保这些部分中描述的文件夹排除项、进程排除项和文件扩展名排除项都配置为内存驻留扫描和文件级扫描。When you deploy a Windows antivirus program on an Exchange server, make sure that the folder exclusions, process exclusions, and file name extension exclusions that are described in these sections are configured for both memory-resident and file-level scanning.

注意****:%ExchangeInstallPath% 值通常为 (包含尾随" ") ,%SystemRoot% 值通常为 (不包括尾随" C:\Program Files\Microsoft\Exchange Server\V15\ \ C:\Windows \ ") ,%SystemDrive%值通常为 (不包括尾随" C: \ ") 。Note: The %ExchangeInstallPath% value is typically C:\Program Files\Microsoft\Exchange Server\V15\ (includes a trailing "\"), the %SystemRoot% value is typically C:\Windows (doesn't include a trailing "\"), and the %SystemDrive% value is typically C: (doesn't include a trailing "\").

许多这些 Exchange 文件夹的位置在 Exchange 命令行管理程序 中是可配置的。The locations of many of these Exchange folders are configurable in the Exchange Management Shell. 若要了解如何在本地 Exchange 组织中打开 Exchange 命令行管理程序,请参阅 Open the Exchange Management ShellTo learn how to open the Exchange Management Shell in your on-premises Exchange organization, see Open the Exchange Management Shell.

文件夹排除Folder exclusions

从 Exchange 服务器上文件级扫描和内存驻留扫描中排除以下文件夹。Exclude the following folders from file-level scanning and memory-resident scanning on Exchange servers.

备注

统一消息在 Exchange 2019 中不可用。Unified Messaging is not available in Exchange 2019.

文件夹Folder 类别Category 说明Description 服务器Servers
%SystemRoot%\Cluster DAGDAGs 群集仲裁数据库和数据库可用组 (DAG) 的其他文件。The cluster quorum database and other files for database availability groups (DAGs). 邮箱服务器Mailbox servers
%SystemDrive%\DAGFileShareWitnesses\<DAGFQDN> DAGDAGs 见证服务器上为 DAG 配置的见证目录。The witness directory on the witness server that's configured for the DAG. 见证服务器实际上可以是本地 Active Directory 林中已不是 DAG 成员的任何 Microsoft Windows 服务器。The witness server can be virtually any Microsoft Windows server in the local Active Directory forest that isn't already a member of the DAG.
若要查看实际位置,请运行以下命令 <DAGName> | :Get-DatabaseAvailabilityGroupFormat-List * Witness*To see the actual location, run the following command: Get-DatabaseAvailabilityGroup <DAGName> | Format-List *Witness*
任意Any
%ExchangeInstallPath%ClientAccess\OAB 脱机通讯簿Offline Address Books 脱机通讯簿文件。Offline Address Book files. 邮箱服务器Mailbox servers
%ExchangeInstallPath%FIP-FS 反恶意软件和 DLPAntimalware and DLP 由恶意软件代理和数据丢失预防 (DLP) 使用的内容扫描。Content scanning that's used by the Malware agent and data loss prevention (DLP). 邮箱服务器Mailbox servers
%ExchangeInstallPath%GroupMetrics 邮件提示MailTips 用于计算大量观众和外部收件人邮件提醒的值的组度量文件。Group Metrics files that are used to calculate values for the Large Audience and External Recipients MailTips. 邮箱服务器Mailbox servers
%ExchangeInstallPath%Logging Exchange 流程日志Exchange process logs 此文件夹包含子文件夹中许多不同类型的 Exchange 日志。例如: This folder contains many different types of Exchange logs in subfolders. For example:
• 日历修复助理日志• Calendar Repair Assistant logs
• 托管文件夹助理日志• Managed Folder Assistant logs
• IMAP4 协议日志• IMAP4 protocol logs
• POP3 协议日志• POP3 protocol logs
若要查看实际位置,请运行以下命令:To see the actual locations, run the following commands:
Get-MailboxServer -Identity <ServerName> | Format-List * LogPath*Get-MailboxServer -Identity <ServerName> | Format-List *LogPath*
Get-PopSettingsFormat-List <ServerName> | LogFileLocationGet-PopSettings <ServerName> | Format-List LogFileLocation
Get-ImapSettingsFormat-List <ServerName> | LogFileLocationGet-ImapSettings <ServerName> | Format-List LogFileLocation
邮箱服务器Mailbox servers
%ExchangeInstallPath%Mailbox 邮箱数据库Mailbox databases Exchange 数据库、检查点文件和日志文件。Exchange databases, checkpoint files, and log files. 默认情况下,这些文件位于基于数据库名称的子文件夹中。By default, these files are located in subfolders based on the name of the database. 若要查看实际位置,请运行以下命令:Get-MailboxDatabase -Server <ServerName> | Format-List EdbFilePath,LogFolderPathTo see the actual locations, run the following command: Get-MailboxDatabase -Server <ServerName> | Format-List EdbFilePath,LogFolderPath
默认情况下,数据库上下文索引文件位于与数据库文件相同的文件夹中,即以数据库 GUID 命名的子文件夹中。By default, database context index files are located in the same folder as the database files in a subfolder that's named after the GUID of the database.
邮箱服务器Mailbox servers
%ExchangeInstallPath%TransportRoles\Data\Adam EdgeSyncEdgeSync Active Directory 轻型目录服务 (AD LDS) 和日志文件。Active Directory Lightweight Directory Services (AD LDS) and log files. 边缘传输服务器Edge Transport servers
%ExchangeInstallPath%TransportRoles\Data\IpFilter 连接筛选Connection filtering IP 筛选器数据库、检查点和日志文件。IP filter database, checkpoint, and log files. 边缘传输服务器Edge Transport servers
%ExchangeInstallPath%TransportRoles\Data\Queue 队列Queues 队列数据库、检查点和日志文件。Queue database, checkpoint, and log files. 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
%ExchangeInstallPath%TransportRoles\Data\SenderReputation 发件人信誉Sender reputation 发件人信誉数据库、检查点和日志文件。Sender Reputation database, checkpoint, and log files. 边缘传输服务器Edge Transport servers
邮箱服务器Mailbox servers
%ExchangeInstallPath%TransportRoles\Data\Temp 内容转换Content conversion 在传输管道中完成的内容转换。Content conversion that's done in the transport pipeline. 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
%ExchangeInstallPath%TransportRoles\Logs 传输日志Transport logs 邮件流和传输管道日志位于子文件夹中,例如:Mail flow and transport pipeline logs are located in subfolders, for example:
• 代理日志记录• Agent logging
• 连接日志记录• Connectivity logging
• 邮件跟踪• Message tracking
• 管道跟踪• Pipeline tracing
• 发送和接收连接器协议日志记录• Send and Receive connector protocol logging
若要查看实际位置,请运行以下命令:To see the actual locations, run the following commands:
Get-TransportServiceFormat-List <ServerName> | * LogPath、TracingPath *Get-TransportService <ServerName> | Format-List *LogPath,*TracingPath
Get-FrontEndTransportServiceFormat-List <ServerName> | * LogPathGet-FrontEndTransportService <ServerName> | Format-List *LogPath
Get-MailboxTransportServiceFormat-List <ServerName> | * LogPath、TracingPath *Get-MailboxTransportService <ServerName> | Format-List *LogPath,*TracingPath
邮箱服务器Mailbox servers
边缘传输服务器(仅传输服务)Edge Transport servers (Transport service only)
%ExchangeInstallPath%TransportRoles\Pickup 拾取目录Pickup directory 拾取目录由管理员用来测试邮件流,或由需要创建并提交各自的邮件文件的应用程序使用。The Pickup directory is used by administrators for mail flow testing or by applications that need to create and submit their own message files.
若要查看实际位置,请运行以下命令 <ServerName> | :Get-TransportServiceFormat-List PickupDirectoryPathTo see the actual location, run the following command: Get-TransportService <ServerName> | Format-List PickupDirectoryPath
邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
%ExchangeInstallPath%TransportRoles\Replay 重播目录Replay directory 重播目录不仅可从外部网关服务器接收邮件,也可用于重新提交管理员从 Exchange 服务器队列导出的邮件。The Replay directory receives messages from foreign gateway servers and can also be used to resubmit messages that administrators export from the queues of Exchange servers.
若要查看实际位置,请运行以下命令:Get-TransportService <ServerName>To see the actual location, run the following command: Get-TransportService <ServerName>
Format-List ReplayDirectoryPathFormat-List ReplayDirectoryPath 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
%ExchangeInstallPath%UnifiedMessaging\Grammars 统一消息Unified Messaging 不同区域设置的语法文件,例如 en-EN 或 es-ES。Grammar files for different locales, for example en-EN or es-ES. Exchange 2016 邮箱服务器Exchange 2016 Mailbox servers
%ExchangeInstallPath%UnifiedMessaging\Prompts 统一消息Unified Messaging 语音提示、问候语和信息性消息文件。Voice prompts, greetings, and informational message files. Exchange 2016 邮箱服务器Exchange 2016 Mailbox servers
%ExchangeInstallPath%UnifiedMessaging\Temp 统一消息Unified Messaging 统一消息生成的临时文件。Temporary files generated by Unified Messaging. Exchange 2016 邮箱服务器Exchange 2016 Mailbox servers
%ExchangeInstallPath%UnifiedMessaging\Voicemail 统一消息Unified Messaging 临时存储的语音邮件文件。Voice mail files that are temporarily stored. Exchange 2016 邮箱服务器Exchange 2016 Mailbox servers
%ExchangeInstallPath%Working\OleConverter 内容转换Content conversion 传输中性编码格式 (TNEF),也称为富文本格式 (RTF),到 MIME/HTML 转换。Transport Neutral Encoding Format (TNEF), also known as Rich Text Format (RTF), to MIME/HTML conversions. 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
%SystemDrive%\inetpub\temp\IIS Temporary Compressed Files Web 组件Web components 使用 Web 上的 Outlook 的 Internet Information Services (IIS) 压缩文件夹。Internet Information Services (IIS) compression folder that's used with Outlook on the web. 邮箱服务器Mailbox servers
%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files Web 组件Web components 使用 Exchange 服务的临时文件。这些文件位于以下子文件夹中:Temporary files that are used with Exchange services. These files are located in the following subfolders:
autodiscoverautodiscover
ecpecp
ecpecp
ewsews
mapimapi
mapi_emsmdbmapi_emsmdb
microsoft-server-activesyncmicrosoft-server-activesync
oaboab
owaowa
owa_calendarowa_calendar
powershellpowershell
rootroot
rpcrpc
邮箱服务器Mailbox servers
%SystemRoot%\System32\Inetsrv Web 组件Web components IIS 系统文件。IIS system files. 邮箱服务器Mailbox servers
%SystemRoot%\Temp\OICE_<GUID> Exchange 搜索Exchange Search 由 Exchange Search 服务和 Microsoft Filter Pack 在沙盒环境中执行文件转换时使用的临时文件。Temporary files used by the Exchange Search service and Microsoft Filter Pack to perform file conversion in a sandboxed environment. 邮箱服务器Mailbox servers

进程排除Process exclusions

许多防病毒程序都支持进程扫描,如果扫描错误进程,可能对 Microsoft Exchange 带来负面影响。因此,应从进程扫描中排除以下 Exchange 或相关进程。Many antivirus programs support the scanning of processes, which can adversely affect Microsoft Exchange if the incorrect processes are scanned. Therefore, you should exclude the following Exchange or related processes from process scanning.

进程Process 路径Path 注释Comments 服务器Servers
ComplianceAuditService.exeComplianceAuditService.exe %ExchangeInstallPath%Bin Microsoft Exchange 合规性审核服务 (MSComplianceAudit)Microsoft Exchange Compliance Audit service (MSComplianceAudit) 邮箱服务器Mailbox servers
Dsamain.exeDsamain.exe %SystemRoot%\System32 Microsoft Exchange ADAM 服务 (ADAM_MSExchange)(已订阅边缘传输服务器上的 Active Directory 轻型目录服务 (AD LDS))Microsoft Exchange ADAM service (ADAM_MSExchange) (Active Directory Lightweight Directory Services (AD LDS) on subscribed Edge Transport servers) 边缘传输服务器Edge Transport servers
EdgeTransport.exeEdgeTransport.exe %ExchangeInstallPath%Bin Microsoft Exchange 传输服务工作进程Microsoft Exchange Transport service worker process 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
fms.exefms.exe %ExchangeInstallPath%FIP-FS\Bin 恶意软件代理和 DLP 使用的内容扫描组件。Content scanning component that's used by the Malware agent and DLP. 邮箱服务器Mailbox servers
hostcontrollerservice.exehostcontrollerservice.exe %ExchangeInstallPath%Bin\Search\Ceres\HostController Microsoft Exchange 搜索主机控制器服务 (HostControllerService)Microsoft Exchange Search Host Controller service (HostControllerService) 邮箱服务器Mailbox servers
inetinfo.exeinetinfo.exe %SystemRoot%\System32\inetsrv Internet Information Services (IIS)Internet Information Services (IIS) 邮箱服务器Mailbox servers
Microsoft.Exchange.AntispamUpdateSvc.exeMicrosoft.Exchange.AntispamUpdateSvc.exe %ExchangeInstallPath%Bin Microsoft Exchange 反垃圾邮件更新服务 (MSExchangeAntispamUpdate)Microsoft Exchange Antispam Update service (MSExchangeAntispamUpdate) 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
Microsoft.Exchange.ContentFilter.Wrapper.exeMicrosoft.Exchange.ContentFilter.Wrapper.exe %ExchangeInstallPath%TransportRoles\agents\Hygiene 内容筛选器代理Content Filter agent 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
Microsoft.Exchange.Diagnostics.Service.exeMicrosoft.Exchange.Diagnostics.Service.exe %ExchangeInstallPath%Bin Microsoft Exchange 诊断服务 (MSExchangeDiagnostics)Microsoft Exchange Diagnostics service (MSExchangeDiagnostics) 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
Microsoft.Exchange.Directory.TopologyService.exeMicrosoft.Exchange.Directory.TopologyService.exe %ExchangeInstallPath%Bin Microsoft Exchange Active Directory 拓扑服务 (MSExchangeADTopology)Microsoft Exchange Active Directory Topology service (MSExchangeADTopology) 邮箱服务器Mailbox servers
Microsoft.Exchange.EdgeCredentialSvc.exeMicrosoft.Exchange.EdgeCredentialSvc.exe %ExchangeInstallPath%Bin Microsoft Exchange 凭据服务 (MSExchangeEdgeCredential)Microsoft Exchange Credential service (MSExchangeEdgeCredential) 边缘传输服务器Edge Transport servers
Microsoft.Exchange.EdgeSyncSvc.exeMicrosoft.Exchange.EdgeSyncSvc.exe %ExchangeInstallPath%Bin Microsoft Exchange EdgeSync 服务 (MSExchangeEdgeSync)Microsoft Exchange EdgeSync service (MSExchangeEdgeSync) 邮箱服务器Mailbox servers
Microsoft.Exchange.Imap4.exeMicrosoft.Exchange.Imap4.exe %ExchangeInstallPath%FrontEnd\PopImap Microsoft Exchange IMAP4 服务 (MSExchangeImap4)Microsoft Exchange IMAP4 service (MSExchangeImap4) 邮箱服务器Mailbox servers
Microsoft.Exchange.Imap4service.exeMicrosoft.Exchange.Imap4service.exe %ExchangeInstallPath%ClientAccess\PopImap Microsoft Exchange IMAP4 后端服务 (MSExchangeIMAP4BE)Microsoft Exchange IMAP4 Backend service (MSExchangeIMAP4BE) 邮箱服务器Mailbox servers
Microsoft.Exchange.Notifications.Broker.exeMicrosoft.Exchange.Notifications.Broker.exe %ExchangeInstallPath%Bin Microsoft Exchange 通知代理服务 (MSExchangeNotificationsBroker)Microsoft Exchange Notifications Broker service (MSExchangeNotificationsBroker) 邮箱服务器Mailbox servers
Microsoft.Exchange.Pop3.exeMicrosoft.Exchange.Pop3.exe %ExchangeInstallPath%FrontEnd\PopImap Microsoft Exchange POP3 服务 (MSExchangePop3)Microsoft Exchange POP3 service (MSExchangePop3) 邮箱服务器Mailbox servers
Microsoft.Exchange.Pop3service.exeMicrosoft.Exchange.Pop3service.exe %ExchangeInstallPath%ClientAccess\PopImap Microsoft Exchange POP3 后端服务 (MSExchangePOP3BE)Microsoft Exchange POP3 Backend service (MSExchangePOP3BE) 邮箱服务器Mailbox servers
Microsoft.Exchange.ProtectedServiceHost.exeMicrosoft.Exchange.ProtectedServiceHost.exe %ExchangeInstallPath%Bin Microsoft Exchange 服务主机服务 (MSExchangeServiceHost)Microsoft Exchange Service Host service (MSExchangeServiceHost) 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
Microsoft.Exchange.RPCClientAccess.Service.exeMicrosoft.Exchange.RPCClientAccess.Service.exe %ExchangeInstallPath%Bin Microsoft Exchange RPC 客户端访问服务 (MSExchangeRPC)Microsoft Exchange RPC Client Access service (MSExchangeRPC) 邮箱服务器Mailbox servers
Microsoft.Exchange.Search.Service.exeMicrosoft.Exchange.Search.Service.exe %ExchangeInstallPath%Bin Microsoft Exchange 搜索服务 (MSExchangeFastSearch)Microsoft Exchange Search service (MSExchangeFastSearch) 邮箱服务器Mailbox servers
Microsoft.Exchange.Servicehost.exeMicrosoft.Exchange.Servicehost.exe %ExchangeInstallPath%Bin Microsoft Exchange 服务主机服务 (MSExchangeServiceHost)Microsoft Exchange Service Host service (MSExchangeServiceHost) 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
Microsoft.Exchange.Store.Service.exeMicrosoft.Exchange.Store.Service.exe %ExchangeInstallPath%Bin Microsoft Exchange 信息存储服务 (MSExchangeIS)Microsoft Exchange Information Store service (MSExchangeIS) 邮箱服务器Mailbox servers
Microsoft.Exchange.Store.Worker.exeMicrosoft.Exchange.Store.Worker.exe %ExchangeInstallPath%Bin Microsoft Exchange 信息存储服务工作进程Microsoft Exchange Information Store service worker process 邮箱服务器Mailbox servers
Microsoft.Exchange.UM.CallRouter.exeMicrosoft.Exchange.UM.CallRouter.exe %ExchangeInstallPath%FrontEnd\CallRouter Microsoft Exchange 统一消息呼叫路由器服务 (MSExchangeUMCR)Microsoft Exchange Unified Messaging Call Router service (MSExchangeUMCR) Exchange 2016 邮箱服务器Exchange 2016 Mailbox servers
MSExchangeCompliance.exeMSExchangeCompliance.exe %ExchangeInstallPath%Bin Microsoft Exchange 合规性服务 (MSExchangeCompliance)Microsoft Exchange Compliance Service (MSExchangeCompliance) 邮箱服务器Mailbox servers
MSExchangeDagMgmt.exeMSExchangeDagMgmt.exe %ExchangeInstallPath%Bin Microsoft Exchange DAG 管理服务 (MSExchangeDagMgmt)Microsoft Exchange DAG Management service (MSExchangeDagMgmt) 邮箱服务器Mailbox servers
MSExchangeDelivery.exeMSExchangeDelivery.exe %ExchangeInstallPath%Bin Microsoft Exchange 邮箱传输交付服务 (MSExchangeDelivery)Microsoft Exchange Mailbox Transport Delivery service (MSExchangeDelivery) 邮箱服务器Mailbox servers
MSExchangeFrontendTransport.exeMSExchangeFrontendTransport.exe %ExchangeInstallPath%Bin Microsoft Exchange 前端传输服务 (MSExchangeFrontEndTransport)Microsoft Exchange Frontend Transport service (MSExchangeFrontEndTransport) 邮箱服务器Mailbox servers
MSExchangeHMHost.exeMSExchangeHMHost.exe %ExchangeInstallPath%Bin Microsoft Exchange 运行状况管理器服务 (MSExchangeHM)Microsoft Exchange Health Manager service (MSExchangeHM) 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
MSExchangeHMWorker.exeMSExchangeHMWorker.exe %ExchangeInstallPath%Bin Microsoft Exchange 运行状况管理器服务工作进程Microsoft Exchange Health Manager service worker process 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
MSExchangeMailboxAssistants.exeMSExchangeMailboxAssistants.exe %ExchangeInstallPath%Bin Microsoft Exchange 邮箱助理服务 (MSExchangeMailboxAssistants)Microsoft Exchange Mailbox Assistants service (MSExchangeMailboxAssistants) 邮箱服务器Mailbox servers
MSExchangeMailboxReplication.exeMSExchangeMailboxReplication.exe %ExchangeInstallPath%Bin Microsoft Exchange 邮箱复制服务 (MSExchangeMailboxReplication)Microsoft Exchange Mailbox Replication service (MSExchangeMailboxReplication) 邮箱服务器Mailbox servers
MSExchangeRepl.exeMSExchangeRepl.exe %ExchangeInstallPath%Bin Microsoft Exchange 复制服务 (MSExchangeRepl)Microsoft Exchange Replication service (MSExchangeRepl) 邮箱服务器Mailbox servers
MSExchangeSubmission.exeMSExchangeSubmission.exe %ExchangeInstallPath%Bin Microsoft Exchange 邮箱传输提交服务 (MSExchangeSubmission)Microsoft Exchange Mailbox Transport Submission service (MSExchangeSubmission) 邮箱服务器Mailbox servers
MSExchangeTransport.exeMSExchangeTransport.exe %ExchangeInstallPath%Bin Microsoft Exchange 传输服务 (MSExchangeTransport)Microsoft Exchange Transport service (MSExchangeTransport) 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
MSExchangeTransportLogSearch.exeMSExchangeTransportLogSearch.exe %ExchangeInstallPath%Bin Microsoft Exchange 传输日志搜索服务 (MSExchangeTransportLogSearch)Microsoft Exchange Transport Log Search service (MSExchangeTransportLogSearch) 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
MSExchangeThrottling.exeMSExchangeThrottling.exe %ExchangeInstallPath%Bin Microsoft Exchange 限制服务 (MSExchangeThrottling)Microsoft Exchange Throttling service (MSExchangeThrottling) 邮箱服务器Mailbox servers
Noderunner.exeNoderunner.exe %ExchangeInstallPath%Bin\Search\Ceres\Runtime\1.0 Microsoft Exchange 搜索服务 (MSExchangeFastSearch)Microsoft Exchange Search service (MSExchangeFastSearch) 邮箱服务器Mailbox servers
OleConverter.exeOleConverter.exe %ExchangeInstallPath%Bin 将富文本格式 (RTF) 邮件转换为 MIME/HTML 以供外部收件人查看。Converts rich text format (RTF) messages to MIME/HTML for external recipients. 邮箱服务器Mailbox servers
ParserServer.exeParserServer.exe %ExchangeInstallPath%Bin\Search\Ceres\ParserServer Microsoft Exchange 搜索服务 (MSExchangeFastSearch)Microsoft Exchange Search service (MSExchangeFastSearch) 邮箱服务器Mailbox servers
Powershell.exePowershell.exe C:\Windows\System32\WindowsPowerShell\v1.0 Exchange 命令行管理程序Exchange Management Shell 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
ScanEngineTest.exeScanEngineTest.exe %ExchangeInstallPath%FIP-FS\Bin 恶意软件代理和 DLP 使用的内容扫描组件Content scanning component that's used by the Malware agent and DLP 邮箱服务器Mailbox servers
ScanningProcess.exeScanningProcess.exe %ExchangeInstallPath%FIP-FS\Bin 恶意软件代理和 DLP 使用的内容扫描组件Content scanning component that's used by the Malware agent and DLP 邮箱服务器Mailbox servers
UmService.exeUmService.exe %ExchangeInstallPath%Bin Microsoft Exchange 统一消息服务 (MSExchangeUM)Microsoft Exchange Unified Messaging service (MSExchangeUM) Exchange 2016 邮箱服务器Exchange 2016 Mailbox servers
UmWorkerProcess.exeUmWorkerProcess.exe %ExchangeInstallPath%Bin Microsoft Exchange 统一消息服务工作进程Microsoft Exchange Unified Messaging service worker process Exchange 2016 邮箱服务器Exchange 2016 Mailbox servers
UpdateService.exeUpdateService.exe %ExchangeInstallPath%FIP-FS\Bin 恶意软件代理和 DLP 使用的内容扫描组件Content scanning component that's used by the Malware agent and DLP 邮箱服务器Mailbox servers
W3wp.exeW3wp.exe %SystemRoot%\System32\inetsrv Internet Information Services (IIS)Internet Information Services (IIS) 邮箱服务器Mailbox servers
wsbexchange.exewsbexchange.exe %ExchangeInstallPath%Bin 用于 Windows Server 备份 (wsbexchange) 的 Microsoft Exchange 服务器扩展Microsoft Exchange Server Extension for Windows Server Backup (wsbexchange) 邮箱服务器Mailbox servers

文件扩展名排除File name extension exclusions

除了排除特定文件夹和进程外,还应排除以下特定于 Exchange 的文件扩展名,以防文件夹排除失败或文件从其默认位置移动。In addition to excluding specific folders and processes, you should exclude the following Exchange-specific file name extensions in case folder exclusions fail or files are moved from their default locations.

扩展Extensions 说明Description 服务器Servers
.config.config 与应用程序有关的扩展名Application-related extensions 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
.chk.chk
.edb.edb
.jfm.jfm
.jrs.jrs
.log.log
.que.que
与数据库有关的扩展名Database-related extensions 邮箱服务器Mailbox servers
边缘传输服务器Edge Transport servers
.dsc.dsc
.txt.txt
与组度量标准有关的扩展名Group Metrics-related extensions 邮箱服务器Mailbox servers
.cfg.cfg
.grxml.grxml
与统一消息有关的扩展名Unified Messaging-related extensions Exchange 2016 邮箱服务器Exchange 2016 Mailbox servers
.lzx.lzx 与脱机通讯簿有关的扩展名Offline address book-related extensions 邮箱服务器Mailbox servers